^= o" Please type a plus sign (+) inside this box [+] pto/sb/os (12/97) 

3 Approved for use through 09/30/00. OMB 0651 -0032 

»== h Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE 

£ Under the Paperwork Reduction Act of 1 995, no persons are required to respond to a collection of information unless it displays a valid OMB control numbeiH 



:0 



UTILITY PATENT APPLICATION TRANSMITTAL 

(Only for new nonprovisional applications under 37 CFR 1 .53(b) 

Attorney Docket No. 42390.P7573 Total Pages _2_ 
First Named Inventor or Application Identifier Gary L Graunke 



Of \- — 

in"-*— 

CI<F\ 



Express Mail Label No. EL 414969060 US 



ADDRESS TO: Assistant Commissioner for Patents 

Box Patent Application 
Washington, D. C. 20231 



APPLICATION ELEMENTS 

See MPEP chapter 600 concerning utility patent application contents. 



X Fee Transmittal Form 

(Submit an original, and a duplicate for fee processing) 

X Specification (Total Pages 25 ) 

(preferred arrangement set forth below) 

- Descriptive Title of the Invention 

- Cross References to Related Applications 

- Statement Regarding Fed sponsored R&D 

- Reference to Microfiche Appendix 

- Background of the Invention 

- Brief Summary of the Invention 

- Brief Description of the Drawings (if filed) 

- Detailed Description 

- Claims 

- Abstract of the Disclosure 

3. _K_ Drawings(s) (35 USC 1 1 3) (Total Sheets _3 ) 



4. __X_ Oath or Declaration (Total Pages _4 ) 

a. „X_ Newly Executed (Original or Copy) 

b. Copy from a Prior Application (37 CFR 1 .63(d)) 

(for Continuation/Divisional with Box 17 completed) (Note Box 5 below) 

i. DELETIONS OF INVENTOR(S) Signed statement attached deleting 

inventor(s) named in the prior application, see 37 CFR 1 .63(d)(2) 
and 1.33(b). 

Incorporation By Reference (useable if Box 4b is checked) 

The entire disclosure of the prior application, from which a copy of the oath or 
declaration is supplied under Box 4b, is considered as being part of the 
disclosure of the accompanying application and is hereby incorporated by 
reference therein. 



12/01/97 



PTO/SB/05 (12/97) 



6. _ Microfiche Computer Program (Appendix) 

7. Nucleotide and/or Amino Acid Sequence Submission 

(if applicable, all necessary) 

a. Computer Readable Copy 

b. Paper Copy (identical to computer copy) 

c. Statement verifying identity of above copies 

ACCOMPANYING APPLICATION PARTS 

8. X Assignment Papers (cover sheet & documents(s)) 

9. a. 37 CFR 3.73(b) Statement (where there is an assignee) 

X b. Power of Attorney 

1 0. English Translation Document (if applicable) 

1 1 . a. Information Disclosure Statement (IDS)/PTO-1 449 

b. Copies of IDS Citations 

12. Preliminary Amendment 

13. X Return Receipt Postcard (MPEP 503) (Should be specifically itemized) 

14. a. Small Entity Statement(s) 

b. Statement filed in prior application, Status still proper and desired 

1 5. Certified Copy of Priority Document(s) (if foreign priority is claimed) 

16. X Other: Separate sheet with Certificate of Mailing, attorney signature and 

registration number and copy of return postcard 



17. If a CONTINUING APPLICATION, check appropriate box and supply the requisite information: 
Continuation Divisional Continuation-in-part (CI P) 

of prior application No: _ 

1 8. Correspondence Address 

Customer Number or Bar Code Label 

(Insert Customer No. or Attach Bar Code Label here) 

or 

X Correspondence Address Below 

NAME Alovsius T. C. AuYeuna 

BLAKELY. SOKOLOFF. TAYLOR & ZAFMAN LLP 

ADDRESS 12400 Wilshire Boulevard 

Seventh Floor 

CITY Los Anaeles STATE California ZIP CODE 90025-1026 

Country U.S.A. TELEPHONE (503^ 684-6200 FAX (503^ 684-3245 



12/01/97 -2- PTO/SB/0 5 ( 1 2 / 9 7 ) 

Approved for use through 09/30/00. OMB 0651-0032 
Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE 



Our Ref.: 42390.P7573 



APPLICATION FOR UNITED STATES LETTERS PATENT 



FOR 



A Dual Use Block/Stream Cipher 



W I hereby certify that I am causing this paper « fee to be deposited with the United 
m States Postal Service "Express Mail Post Offlcs to Addressee" service on the date 
m indicated above and that this paper or fee has been addressed to the Assistant 
sioner lor Patents 



Sigi 




n lor Patents, Vtoshington, D.C V 20231 _ / / 
7^ Date 



Inventor(s): Gary L Graunke 
David A. Lee 
Robert W. Faber 



Prepared by: 

BLAKELY SOKOLOFF TAYLOR & ZAFMAN, LLP 
12400 Wilshire Boulevard, 7th Floor 
Los Angeles, California 90025 
(503) 684-6200 



"Express Mail" label number EL 41 469060 US 



Attorney Docket Ref: 42390.P7573 

A Dual Use Block/Stream Cipher 



BACKGROUND OF THE INVENTION 



5 1. Field of the Invention 

The present invention relates to the field of cryptography. More specifically, 
the present invention relates to the robustness of stream ciphers. 



2. Background Information 

10 Crytographic ciphers can be broadly divided into block ciphers and stream 

ciphers. Block ciphers cipher a block of plain text into ciphered text by applying 
multiple successive rounds of transformation to the plain text, using a cipher key. 
An example of a block cipher is the well known DES cipher. Stream ciphers cipher 
a stream of plain data into ciphered data by combining the stream of plain data with 

15 a pseudo random sequence dynamically generated using a cipher key. An example 
of a stream cipher is the well known XPD/KPD cipher. 

Conventionally, if an application requires block as well as stream ciphering, 
both ciphers are provided. For hardware implementations, this is inefficient and 
wastes valuable real estate space. Accordingly, a dual use block/stream cipher that 

20 can be used as either block cipher or a stream cipher is desired. 
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SUMMARY OF THE INVENTION 

A dual use block/stream cipher is provided with a first key section and a data 
section. The first key section is to be initialized with a first cipher key, and to 
5 successively transform the first cipher key or a modified version of the first cipher 
key. The data section, coupled to the first key section, is to be initialized with either 
a block of plain text or a random number, and to successively and dependently, on 
the first key section, transform the plain text/random number. The cipher is further 
provided with a second key section and a mapping function. The second key 
10 section, coupled to the first key section, is selectively enableable to modify the first 
cipher key. The mapping section, coupled to the first key section, is to generate a 
pseudo random bit sequence when the second key section is selectably enabled to 
modify the stored first cipher key. 



Graunke et al. - A Dual Use 
Block/Stream Cipher 



Express No: EL 41469060 US 
ATA/mjt 



Attorney Docket Ref: 42390.P7573 

BRIEF DESCRIPTION OF DRAWINGS 

The present invention will be described byway of exemplary embodiments, 
but not limitations, illustrated in the accompanying drawings in which like references 
5 denote similar elements, and in which: 

Figure 1 illustrates an overview of the combined block/stream cipher of the 
present invention, in accordance with one embodiment; 

Figure 2 illustrates the block key section of Fig. 1 in further detail, in 
accordance with one embodiment; 
10 Figure 3 illustrates the block data section of Fig. 1 in further detail, in 

accordance with one embodiment; 

Figures 4a-4c illustrate the stream data section of Fig. 1 in further detail, in 
accordance with one embodiment; and 

Figure 5 illustrates a bit-wise view of the mapping section of Fig. 1 in further 
15 detail, in accordance with one embodiment. 
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DETAILED DESCRIPTION OF THE INVENTION 

In the following description, various aspects of the present invention will be 
described, and various details will be set forth in order to provide a thorough 
5 understanding of the present invention. However, it will be apparent to those skilled 
in the art that the present invention may be practiced with only some or all aspects of 
the present invention, and the present invention may be practiced without the specific 
details. In other instances, well known features are omitted or simplified in order not 
to obscure the present invention. 
10 Various operations will be described as multiple discrete steps performed in 

Jj turn in a manner that is most helpful in understanding the present invention. 

i| However, the order of description should not be construed as to imply that these 

Itj operations are necessarily performed in the order they are presented, or even order 

!J dependent. Lastly, repeated usage of the phrase "in one embodiment" does not 

% 15 necessarily refer to the same embodiment, although it may. 

*D Referring now to Figure 1 , wherein a block diagram illustrating the combined 

S block/stream cipher of the present invention, in accordance with one embodiment, is 

shown. As illustrated, combined block/stream cipher 110 includes block key section 
20 502, data section 504, stream key section 506, and mapping section 508, coupled to 
one another. Block key section 502 and data section 504 are employed in both the 
block mode as well as the stream mode of operation, whereas stream key section 
506 and mapping section 508 are employed only in the stream mode of operation. 
Briefly, in block mode, block key section 502 is provided with a block cipher 
25 key, such as an authentication key Km or a session key Ks of a video content 

protection application; whereas data section 504 is provided with the plain text, such 
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as a basis random number An or a derived random number Mi-1 of a video content 
protection application. "Rekeying enable" signal is set to a "disabled" state, 
operatively de-coupling block key section 502 from stream key section 506 during 
the block mode of operation. 

[A video content protection application that uses Km, Kx, An and Mi is 
described in copending U.S. Patent Applications, serial numbers, <to be inserted>, 
filed contemporaneously, both entitled "Digital Video Content Transmission 
Ciphering/Deciphering Method and Apparatus", having common assignee and 
inventorship with the present application.] 

During each clock cycle, the block cipher key as well as the plain text are 
transformed. The block cipher key is independently transformed, whereas 
transformation of the plain text is dependent on the transformation being performed 
on the block cipher key. After a desired number of clock cycles, the provided plain 
text is transformed into ciphered text. For the video content protection method 
disclosed in above mentioned co-pending applications, when block key section 502 
is provided with Km and data section 504 is provided with the An, ciphered An is 
read out and used as the session key Ks. When block key section 502 is provided 
with Ks and data section 504 is provided with the Mi-1 , ciphered Mi-1 is read out and 

used as the frame key Ki. 

To decipher the ciphered plain text, block key section 502 and data section 
504 are used in like manner as described above to generate the intermediate "keys", 
which are stored away (in storage locations not shown). The stored intermediate 
"keys" are then applied to the ciphered text in reversed order, resulting in the 
deciphering of the ciphered text back into the original plain text. Another approach 
to deciphering the ciphered text will be described after block key section 502 and 
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data section 504 have been further described in accordance with one embodiment 
each, referencing Figs. 2-3. 

In stream mode, stream key section 506 is provided with a stream cipher key, 
such as a session key Ks or a frame key Ki of a video content protection application. 
5 Block key section 502 and data section 504 are provided with random numbers, 
such as a session/frame keys Ks/Ki and a derived random numbers Mi-1 of a video 
content protection application. "Rekeying enable" signal is set to an "enabled" state, 
operatively coupling block key section 502 to stream key section 506. Periodically, 
at predetermined intervals, such as the horizontal blanking intervals of a video 

10 frame, stream key section 506 is used to generate one or more data bits to 

dynamically modify the then current state of the random number stored in block data 
section 502. During each clock cycle, in between the predetermined intervals, both 
random numbers stored in block key section 502 and data section 504 are 
transformed. The random number provided to block key section 502 is 

15 independently transformed, whereas transformation of the random number provided 
to data section 504 is dependent on the transformation being performed in block key 
section 502. Mapping block 506 retrieves a subset each, of the newly transformed 
states of the two random numbers, and reduces them to generate one bit of the 
pseudo random bit sequence. Thus, in a desired number of clock cycles, a pseudo 

20 random bit sequence of a desired length is generated. 

For the illustrated embodiment, by virtue of the employment of the "rekeying 
enable" signal, stream key section 506 may be left operating even during the block 
mode, as its outputs are effectively discarded by the "rekeying enable" signal (set in 
a "disabled" state). 

25 
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Figure 2 illustrates the block key section of Fig. 1 in further detail, in 
accordance with one embodiment. As illustrated, block key section 502 includes 
registers 602a-602c, substitution boxes 604, and linear transformation unit 606. In 
block mode, registers 602a-602c are collectively initialized to a block cipher key, e.g. 
5 the earlier mentioned authentication key Km or session key Ks. In stream mode, 
registers 602a-602c are collectively initialized to a random number, e.g. the erlier 
mentioned session key Ks or frame key Ki. Each round, substitution boxes 604 and 
linear transformation unit 606 modify the content of registers 602a-602c. More 
specifically, substitution boxes 604 receive the content of register 602a, modify it, 

10 and then store the substituted content into register 602c. Similarly, linear 

transformation unit 606 receives the content of registers 602b and 602c, linearly 
transforms them, and then correspondingly stores the linearly transformed content 
into registers 602a and 602b. 

Substitution boxes 604 and linear transformation unit 606 may be 

15 implemented in a variety of ways in accordance with well known cryptographic 
principles. One specific implementation is given in more detail below after the 
description of Fig. 3. 

Figure 3 illustrates the block data section of Fig. 1 in further detail, in 
accordance with one embodiment. For the illustrated embodiment, data section 504 

20 is similarly constituted as block key section 502, except linear transformation unit 
706 also takes into consideration the content of register 602b, when transforming 
the contents of registers 702b-702c. In block mode, registers 702a-702c are 
collectively initialized with the target plain text, e.g. earlier described random number 
An or derived random number Mi-1 . In stream mode, registers 702a-702c are 

25 collectively initialized with a random number. Each round, substitution boxes 704 
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and linear transformation unit 706 modify the content of registers 702a-702c as 
described earlier for block key section 502 except for the differences noted above. 

Again, substitution boxes 604 and linear transformation unit 606 may be 
implemented in a variety of ways in accordance with well known cryptographic 
5 principles. 

In one implementation for the above described embodiment, each register 
602a, 602b, 602c, 702a, 702b, 702c is 28-bit wide. [Whenever registers 602a-602c 
or 702a-702cb collectively initialized with a key value or random number less than 
84 bits, the less than 84-bit number is initialized to the lower order bit positions with 

10 the higher order bit positions zero filled.] Additionally, each set of substitution boxes 
604 or 704 are constituted with seven 4 input by 4 output substitution boxes. Each 
linear transformation unit 606 or 706 produces 56 output values by combining 
outputs from eight diffusion networks (each producing seven outputs). More 
specifically, the operation of substitution boxes 604/704 and linear transformation 

15 unit 606/706 are specified by the four tables to follow. For substitution boxes 

604/704, the Ith input to box J is bit l*7+J of register 602a/702a, and output I of box 
J goes to bit l*7+j of register 602c/702c. [Bit 0 is the least significant bit] For each 
diffusion network (linear transformation unit 606 as well as 706), the inputs are 
generally labeled 10-16 and the outputs are labeled O0-O6. The extra inputs for 

20 each diffusion network of the linear transformation unit 706 is labeled K0-K6. 
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Table I - Substitution performed by each of the seven constituting substitution 
boxes of substitution boxes 604/704. 
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Table II - Diffusion networks for linear transformation unit 606/706 (continued 
in Tables III & IV). 
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Table III - Diffusion networks for linear transformation unit 606/706 (continued 
in Table IV). 
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Table IV - Diffusion networks for linear transformation unit 606/706 (continued 
from Table III). 



5 Referring now back to Fig, 5, recall that a ciphered text may be deciphered 

by generating the intermediate "keys" and applying them backward. Alternatively, 
for an embodiment where either the inverse of substitution boxes 604/704 and linear 
transformation units 606/706 are included or they may be dynamically reconfigured 
to operate in an inverse manner, the ciphered text may be deciphered as follows. 

10 First, the cipher key used to cipher the plain text is loaded into block key section 
502, and block key section 502 is advanced by R-1 rounds, i.e. one round short of 
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the number of rounds (R) applied to cipher the plain text. After the initial R-1 
rounds, the ciphered text is loaded into data section 504, and both sections, block 
key section 502 and data section 504, are operated "backward", i.e. with substitution 
boxes 604/704 and linear transformation units 606/706 applying the inverse 
5 substitutions and linear transformations respectively. 

Figures 4a-4c illustrate the stream key section of Fig. 1 in further detail, in 
accordance with one embodiment. As illustrated in Fig. 4a, stream key section 506 
includes a number of linear feedback shift registers (LFSRs) 802 and combiner 

10 function 804, coupled to each other as shown. LFSRs 802 are collectively initialized 
with a stream cipher key, e.g. earlier described frame key Ki. During operation, the 
stream cipher key is successively shifted through LFSRs 802. Selective outputs are 
taken from LFSRs 802, and combiner function 804 is used to combine the selective 
outputs. In stream mode (under which, rekeying is enabled), the combined result is 

15 used to dynamically modify a then current state of a block cipher key in block key 
section 502. 

For the illustrated embodiment, four LFSRs of different lengths are employed. 
Three sets of outputs are taken from the four LFSRs. The polynomials represented 
by the LFSR and the bit positions of the three sets of LFSR outputs are given by the 
20 table to follows: 
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Table V - Polynomials of the LFSR and tap positions. 



The combined result is generated from the third set of LFSR outputs, using 
5 the first and second set of LFSR outputs as data and control inputs respectively to 
combiner function 802. The third set of LFSR outputs are combined into a single bit. 
In stream mode (under which, rekeying is enabled), the combined single bit is then 
used to dynamically modify a predetermined bit of a then current state of a block 
cipher key in block key section 502. 

10 Fig. 4b illustrates combiner function 804 in further detail, in accordance with 

one embodiment. As illustrated, combiner function 804 includes shuffle network 806 
and XOR 808a-808b, serially coupled to each other and LFSRs 802 as shown. For 
the illustrated embodiment, shuffle network 806 includes four binary shuffle units 
810a-810d serially coupled to each other, with first and last binary shuffle units 810a 

15 and 81 Od coupled to XOR 808a and 808b respectively. XOR 808a takes the first 
group of LFSR outputs and combined them as a single bit input for shuffle network 
806. Binary shuffle units 810a-810d serially propagate and shuffle the output of 
XOR 808a. The second group of LFSR outputs are used to control the shuffling at 
corresponding ones of binary shuffle units 810a-810d. XOR 808b combines the 

20 third set of LFSR outputs with the output of last binary shuffle unit 81 Od. 
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Fig. 4c illustrates one binary shuffle unit 810* (where * is one of a-d) in 
further detail, in accordance with one embodiment. Each binary shuffle unit 810* 
includes two flip-flops 812a and 812b, and a number of selectors 814a-814c, 
coupled to each other as shown. Flip-flops 812a and 812b are used to store two 
5 state values (A, B). Each selector 81 4a, 81 4b or 81 4c receives a corresponding 
one of the second group of LFSR outputs as its control signal. Selector 814a-814b 
also each receives the output of XOR 808a or an immediately preceding binary 
shuffle unit 810* as input. Selector 814a-814b are coupled to flip-flops 812a-812b to 
output one of the two stored state values and to shuffle as well as modify the stored 
10 values in accordance with the state of the select signal. More specifically, for the 
illustrated embodiment, if the stored state values are (A, B), and the input and select 
values are (D, S), binary shuffle unit 810* outputs A, and stores (B, D) if the value of 
S is "0". Binary shuffle unit 810* outputs B, and stores (D, A) if the value of S is "1". 

15 Referring now to back to Figure 1 , as illustrated and described earlier, 

mapping function 508 generates the pseudo random bit sequence based on the 
contents of selected registers of block key section 502 and data section 504. In one 
embodiment, where block key section 502 and data section 504 are implemented in 
accordance with the respective embodiments illustrated in Fig. 2-3, mapping 

20 function 508 generates the pseudo random bit sequence at 24-bit per clock based 
on the contents of registers (Ky and Kz) 602b-602c and (By and Bz) 702b-702c. 
More specifically, each of the 24 bits is generated by performing the XOR operation 
on nine terms in accordance with the following formula: 

(B0«K0) e (B1«K1) 0 (B2«K2) © (B3«K3) © (B4«K4) © (B5«K5) © (B6»K6) © 

25 B7 © K7 
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Where "©" represents a logical XOR function, "•" represents a logical AND 
function, and the input values B and K for the 24 output bits are 
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5 Accordingly, a novel dual use block or stream cipher has been described. 



Epilogue 

From the foregoing description, those skilled in the art will recognize that 
many other variations of the present invention are possible. In particular, while the 
10 present invention has been described with the illustrated embodiments, non-LFSR 

based stream key section, more or less block key registers, larger or smaller block 
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key registers, more or less substitution units, including alternative substitution 
patterns, as well as different linear transformation units may be employed. Thus, 
the present invention is not limited by the details described, instead, the present 
invention can be practiced with modifications and alterations within the spirit and 
scope of the appended claims. 



Graunke et al. - A Dual Use 
Block/Stream Cipher 



16 



Express No: EL 41 469060 US 
ATA/mjt 



Attorney Docket Ref : 42390.P7573 
CLAIMS 

What is claimed is: 
11. An apparatus comprising: 

2 a first key section to be initialized with either a first cipher key, and to 

3 successively transform the first cipher key or a selectively modified version of the 

4 first cipher key; 

5 a data section coupled to the first key section to be initialized with either a 

6 block of plain text or a random number, and to successively and dependently, on the 

7 first key section, transform the plain text/random number; 

8 a second key section coupled to the first key section selectively enableable to 

9 selectively modify the first cipher key; and 

10 a mapping section coupled to the first key section and the data section to^-"' 

1 1 generate a pseudo random bit sequence when the first key section and the data 

12 section are initialized with the first cipher key and the random number respectively, 

13 and the second key section is selectably enabled to modify the stored first cipher 

14 key. 

1 2. The apparatus of claim 1 , wherein the first key section comprises a first, a 

2 second and a third registel-to be collectively initialized to said first cipher key. 

1 3. The apparatus of claim 2, wherein the first key section further comprises a 

2 plurality of substitution units coupled to the first and the third register to receive the 

3 stored content of the first register, make at least partial substitution to the received 
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4 content and store the at least partially substituted content into the third register 

5 during a round of operation. 

1 4. The apparatus of claim 2, wherein the first key section further comprises a 

2 linear transformation unit coupling the second register to the first register to store a 

3 linearly transformed version of the content of the second register into the first 

4 register during a round of operation. 

1 5. The apparatus of claim 2, wherein the first key section further comprises a 

2 linear transformation unit coiipfincfthe third register to the second register to store a 

3 linearly transformed version of the content of the third register into the second 

4 register during a round of operation. 

1 6. The apparatus of claim 1 , wherein the data section comprises a first, a 

2 second and a third register to^e-oollectively initialized to either the block of plain 

3 text or the random number. 

1 7. The apparatus of claim 6, wherein the data section further comprises a 

2 plurality of substitution units coiped to the first and the third register to receive the 

3 stored content of the first register, make at least partial substitution to the received 

4 content and store the at least partially substituted content into the third register 

5 during a round of operation. 

1 8. The apparatus of claim 6, wherein the data section further comprises a linear 

2 transformation unit coupling the second register to the first register to store a linearly 

3 transformed version of the content of the second register into the first register, 
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4 factoring into consideration inputs from the first key section, during a round of 

5 operation. 

1 9. The apparatus of claim 6, wherein the data section further comprises a linear 

2 transformation unit couplingTthethird register to the second register to store a 

3 linearly transformed version of the content of the third register into the second 

4 register, factoring into consideration inputs from the first key section, during a round 

5 of operation. 

1 1 0. The apparatus of claim 1 , wherein the second key section comprises one or 

2 more linear feedback shift registers (LFSRs) to output a first, second and third 

3 plurality of data bits; and a combiner function coupled to the LFSRS, and having a 

4 network of shuffle units serially coupled to each other, to combine the third plurality 

5 of data bits, using the first and second plurality of data bits. 

1 11. The apparatus of claim 1 , wherein the mapping section comprises a plurality 

2 of logical gates coupled to a fifsTand a second register in said first key and data 

3 sections respectively to generate said pseudo random bit sequence. 

1 12. An apparatus comprising: 

2 a key section having a first, a second and a third register to be collectively 

3 initialized with a first cipher key, and a first plurality of transformation units coupled 

4 to the at least first, second and third registers to successively transform the first 

5 cipher key; and 

6 a data section having a fourth, a fifth and a sixth register to be collectively 

7 initialized with a block of plain text, and a second plurality of transformation units 
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8 coupled to the second, fourth, fifth and sixth registers to successively and 

9 dependently, on the key section, transform the plain text. 

1 13. The apparatus of claim 12, wherein the first plurality of transformation units 

2 comprise a plurality of substitution units coupled to the first and the third register to 

3 receive the stored content of the first register, make at least partial substitution to 

4 the received content and store the at least partially substituted content into the third 

5 register during a round of operation. 

1 14. The apparatus of claim 12, wherein the first plurality of transformation units 

2 comprise a linear transformation-unit coupling the second register to the first register 

3 to store a linearly transformed version of the content of the second register into the 

4 first register during a round of operation. 

1 15. The apparatus of claim 12, wherein the first plurality of transformation units 

2 comprise a linear transformatioTTunit coupling the third register to the second 

3 register to store a linearly transformed version of the content of the third register into 

4 the second register during a round of operation. 

1 16. The apparatus of claim 1 2^wberein the second plurality of transformation 

2 units comprise a plurality of substitution units coupled to the fourth and the sixth 

3 register to receive the stored content of the fourth register, make at least partial 

4 substitution to the received content and store the at least partially substituted 

5 content into the sixth register during a round of operation. 
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1 17. The apparatus of claim 12, wherein the second plurality of transformation 

2 units comprise a linear transformation unit coupling the fifth register to the fourth 

3 register to store a linearly transformed version of the content of the fifth register into 

4 the fourth register, factoring into consideration inputs from the first key section, 

5 during a round of operation. 

1 18. The apparatus of claim 12, wherein the second plurality of transformation 

2 units comprise a linear transformation unit coupling the sixth register to the fifth 

3 register to store a linearly transformed version of the content of the sixth register into 

4 the fifth register, factoring into consideration inputs from the first key section, during 

5 a round of operation. 

1 19. An apparatus comprising: 

2 a first key section having a first, a second and a third register to be 

3 collectively initialized with a first cipher key, and a first plurality of transformation 

4 units coupled to the first, second and third registers to successively transform a 

5 selectively modified version of the first cipher key; 

6 a data section having a fourth, a fifth, and a sixth register to be collectively 

7 initialized with a random number, and a second plurality of transformation units 

8 coupled to the second, fourth, fifth and sixth registers to successively and 

9 dependency, on the first key section, transform the random number; 

10 a second key section coupled to the first key section to selectively modify the 

11 first cipher key; and 

12 a mapping section coupled to the first key section and the data section to 

13 generate a pseudo random bit sequence. 
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1 20. The apparatus of claim 19, wherein the first plurality of transformation units 

2 comprise a plurality of substitujiorf units coupled to the first and the third register to 

3 receive the stored content ot the first register, make at least partial substitution to 

4 the received content and store the at least partially substituted content into the third 

5 register during a round of operation. 

1 21 . The apparatus of claim 1 9, wherein the first plurality of transformation units 

2 comprise a linear transformatiop,.ufiit coupling the second register to the first register 

3 to store a linearly transformed version of the content of the second register into the 

4 first register during a round of operation. 

1 22. The apparatus of claim 1 9, wherein the first plurality of transformation units 

2 comprise a linear transformation unit coupling the third register to the second 

3 register to store a linearly transformed version of the content of the third register into 

4 the second register during a round of operation. 

1 23. The apparatus of claim 1 9, wherein the second plurality of transformation 

y 

2 units comprise a plurality of substitution units coupled to the first and the third 

3 register to receive the stored content of the first register, make at least partial 

4 substitution to the received content and store the at least partially substituted 

5 content into the third register during a round of operation. 

1 24. The apparatus of claim 1 9, wherein the first plurality of transformation units 

2 comprise a linear transformation LjFiit coupling the second register to the first register 

3 to store a linearly transformed version of the content of the second register into the 
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4 first register, taking into consideration inputs from the first key section, during a 

5 round of operation. 

1 25. The apparatus of claim 1 9, wherein the first plurality of transformation units 

2 comprise a linear transform^ttoti'tinit coupling the third register to the second 

3 register to store a linearly transformed version of the content of the third register into 

4 the second register, taking into consideration inputs from the first key section, during 

5 a round of operation. 

1 26. The apparatus of claimJjM#herein the second key section comprises one or 

2 more linear feedback shift registers (LFSRs) to output a first, a second and a third 

3 plurality of data bits; and a combiner function coupled to the LFSRs, and having a 

4 network of shuffle units serially coupled to each other, to combine the third plurality 

5 of data bits using the first and second plurality of data bits. 

1 27. The apparatus of claim 19^ wherein the mapping section comprises a plurality 

2 of logical gates coupled to the third and sixth registers of said first key and data 

3 sections respectively to generate said pseudo random bit sequence. 
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ABSTRACT OF THE DISCLOSURE 

A dual use block/stream cipher is provided with a first key section and a data 
section. The first key section is to be initialized with a first cipher key, and to 
5 successively transform the first cipher key or a modified version of the first cipher 
key. The data section, coupled to the first key section, is to be initialized with either 
a block of plain text or a random number, and to successively and dependency, on 
the first key section, transform the plain text/random number. The cipher is further 
provided with a second key section and a mapping function. The second key 
10 section, coupled to the first key section, is selectively enableable to modify the first 
cipher key. The mapping section, coupled to the first key section, is to generate a 
pseudo random bit sequence when the second key section is selectably enabled to 
modify the stored first cipher key. 
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Kalson, Reg. No. 40,670; David J. Kaplan, Reg. No. 41,105; Leo V. Novakoski, Reg. No. 
37,198; Naomi Obinata, Reg. No. 39,320; Thomas C. Reynolds, Reg. No. 32,488; Steven P. 
Skabrat, Reg. No. 36,279; Howard A. Skaist, Reg. No. 36,008; Steven C. Stewart, Reg. No. 
33,555; Raymond J. Werner, Reg. No. 34,752; Robert G. Winkle, Reg. No. 37,474; and Charles 
K. Young, Reg. No. 39,435; my patent attorneys, and Jeffrey S. Draeger, Reg. No. 41,000; 
Thomas Raleigh Lane, Reg. No. 42,781; Calvin E. Wells, Reg. No. P43,256; and Alexander 
Ulysses Witkowski, Reg. No. P43,280; my patent agents, of INTEL CORPORATION; and 
James R. Thein, Reg. No. 31,710, my patent attorney; with full power of substitution and 
revocation, to prosecute this application and to transact all business in the Patent and Trademark 
Office connected herewith. 

Send correspondence to Alovsius T.C. AuYeung . BLAKELY, SOKOLOFF, TAYLOR 

(Name of Attorney or Agent) 
& ZAFMAN LLP, 12400 Wilshire Boulevard 7th Floor, Los Angeles, California 90025 

and direct telephone calls to Aloysius T.C. AuYeung , (503) 684-6200. 

(Name of Attorney or Agent) 
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I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made 
are punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the 
United States Code and that such willful false statements may jeopardize the validity of the 
application or any patent issued thereon. 



Full Name of Sole/First Inventor Gary L. Graunke 



Inventor's Signature Date 
Residence Hillsboro. Oregon Citizenship USA 



(City, State) (Country) 
Post Office Address 362 NE Hillwood Drive 



Hillsboro. Oregon 97124 



Full Name of Second/Joaltlnventoik /HJavid A. Lee 



Inventor's Signature C — Date . 

Residence Beaverton. Oregon Citizenshi p USA 



(City, State) (Country) 

Post Office Address 740 SW Willow Creek Drive 

Beaverton. Oregon 97006 

Full Name of Third/Joint Invento r Robert W. Faber 

Inventor's Signature < T£2&>ct IV . jr*^^^ Date 23 A^O^T ifff 

Residence Hillsboro. Oregon Citizenshi p USA 



(City, State) (Country) 

Post Office Address 942 NE Third Avenue 

Hillsboro. Oregon 97124 
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